Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:29:12 +0000 bdu:2020-02925 https://cve.radiocsirt.org/vuln/bdu:2020-02925 bdu:2020-02925 https://cve.radiocsirt.org/vuln/bdu:2020-02925 cnvd-2020-23235 https://cve.radiocsirt.org/vuln/cnvd-2020-23235 cnvd-2020-23235 https://cve.radiocsirt.org/vuln/cnvd-2020-23235 EUVD-2026-38281 https://cve.radiocsirt.org/vuln/euvd-2026-38281 EUVD-2026-38281 https://cve.radiocsirt.org/vuln/euvd-2026-38281 fkie_cve-2020-8147 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8147 <p>Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using utils-extend.</p> <p>Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using utils-extend.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8147 GHSA-6pq3-928q-x6w6 — Prototype Pollution https://cve.radiocsirt.org/vuln/ghsa-6pq3-928q-x6w6 <p><strong>Affected:</strong> npm: utils-extend</p> <p>All versions of `utils-extend` are vulnerable to prototype pollution. The `extend` function does not restrict the modification of an Object&#39;s prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.</p> <p>## Recommendation</p> <p>No fix is currently available. Consider using an alternative package until a fix is made available.</p> <p><strong>Affected:</strong> npm: utils-extend</p> <p>All versions of `utils-extend` are vulnerable to prototype pollution. The `extend` function does not restrict the modification of an Object&#39;s prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.</p> <p>## Recommendation</p> <p>No fix is currently available. Consider using an alternative package until a fix is made available.</p> https://cve.radiocsirt.org/vuln/ghsa-6pq3-928q-x6w6 gsd-2020-8147 https://cve.radiocsirt.org/vuln/gsd-2020-8147 gsd-2020-8147 https://cve.radiocsirt.org/vuln/gsd-2020-8147